ZITADEL v4.17.1

v4.17.1
Fixed 4
  • Block Login V2 auth for users in deactivated organizations
  • Enforce permission check when issuing passkey enrollment codes
  • Prevent the browser from requesting OTP codes via returnCode
  • Require MFA prompt step before 2FA enrollment
4.17.1 (2026-08-14)
Bug Fixes
  • block Login V2 auth for users in deactivated organizations (a9311b8)
  • command: enforce permission check when issuing passkey enrollment codes (76dd58e)
  • login: prevent the browser from requesting OTP codes via returnCode (5f75afb)
  • login: require MFA prompt step before 2FA enrollment (db42371)
View original

Upgraded? How did it go?

Discussion